All trademarks are the property of their respective owners.
This document contains information for DRV8243-Q1 to aid in a functional safety system design. This document covers all the device package and interface variants as listed below:
Figure 1-1 shows the HW device variant's functional block diagram for reference.
Figure 1-2 shows the SPI "S" device variant's functional block diagram for reference.
Figure 1-3 shows the SPI "P" device variant's functional block diagram for reference.
DRV8243-Q1 was developed using a quality-managed development process, but was not developed in accordance with the IEC 61508 or ISO 26262 standards.
ADVANCE INFORMATION for preproduction products; subject to change without notice.
This section provides Functional Safety Failure In Time (FIT) rates for DRV8243-Q1 based on two different industry-wide used reliability standards:
FIT IEC TR 62380 / ISO 26262 | FIT (Failures Per 109 Hours) | ||||
---|---|---|---|---|---|
HW variant in HVSSOP package | SPI "S" variant in HVSSOP package | SPI "P" variant in HVSSOP package | HW variant in VQFN-HR package | SPI "S" variant in VQFN-HR package | |
Total Component FIT Rate | 23 | 23 | 23 | 26 | 26 |
Die FIT Rate | 9 | 9 | 9 | 16 | 16 |
Package FIT Rate | 14 | 14 | 14 | 10 | 10 |
The failure rate and mission profile information in Table 2-1 comes from the Reliability data handbook IEC TR 62380 / ISO 26262 part 11:
Table | Category | Reference FIT Rate | Reference Virtual TJ |
---|---|---|---|
5 | CMOS,BICMOS Digital, analog / mixed | 25 FIT | 55°C |
The Reference FIT Rate and Reference Virtual TJ (junction temperature) in Table 2-2 come from the Siemens Norm SN 29500-2 tables 1 through 5. Failure rates under operating conditions are calculated from the reference failure rate and virtual junction temperature using conversion information in SN 29500-2 section 4.
The failure mode distribution estimation for DRV8243-Q1 in Table 3-1 comes from the combination of common failure modes listed in standards such as IEC 61508 and ISO 26262, the ratio of sub-circuit function size and complexity and from best engineering judgment.
The failure modes listed in this section reflect random failure events and do not include failures due to misuse or overstress.
Die Failure Modes | Failure Mode Distribution (%) |
---|---|
Output is stuck LOW when commanded OFF (GND short) | 14%(2) |
Output is stuck HIGH when commanded OFF (VM short) | 14%(2) |
Output is stuck OFF when commanded LOW (Open) | 8%(2) |
Output is stuck OFF when commanded HIGH (Open) | 8%(2) |
Output ON resistance too high when commanded LOW | 12%(2) |
Output ON resistance too high when commanded HIGH | 18%(2) |
Low side slew rate too fast or too slow (high-side recirculation) | 5%(2) |
High side slew rate too fast or too slow (low-side recirculation) | 5%(2) |
Dead-time is too short | 1%(2) |
Current sense feedback incorrect | 3% |
ITRIP current regulation incorrect | 3% |
Incorrect communication (SPI variant)/ configuration interpretation (HW variant) | 4%(1) |
Incorrect input interpretation (nSLEEP, DRVOFF, EN/IN1, PH/IN2) | 4%(1) |
Incorrect nFAULT assertion | 1% |
This section provides a Failure Mode Analysis (FMA) of the pins for each of the device variants of DRV8243-Q1 as listed below.
The failure modes covered in this document include the typical pin-by-pin failure scenarios:
The analysis also indicates how these pin conditions can affect the device as per the failure effects classification in Table 4-1.
Class | Failure Effects |
---|---|
A | Potential device damage that affects functionality |
B | No device damage, but loss of functionality |
C | No device damage, but performance degradation |
D | No device damage, no impact to functionality or performance |
Following are the assumptions of use and the device configuration assumed for the pin FMA in this section:
Figure 4-2 shows the pin diagram. For a detailed description of the device pins please refer to the Pin Configuration and Functions section in the DRV8243-Q1 data sheet.
Pin | Description of Potential Failure Effect(s) | Failure Effect Class | |
---|---|---|---|
No. | Name | ||
1 | SCLK | SPI communication is lost. | B |
2 | nSCS | SPI communication is lost. | B |
3 | PH/IN2 | Normal function as register bit is used for direction control. | D |
4 | EN/IN1 | Load will be in re-circulation (braking). No risk of spin direction reversal. | B |
5 | DRVOFF | Pin based shutoff function is lost. | B |
6, 7, 8, 21, 22, 23 | VM | Device is powered off with driver Hi-Z. | B |
9, 10, 11 | OUT1 | If OUT1 is commanded to be pulled high, short is detected and outputs are Hi-Z. | B |
12, 13, 14, 15, 16, 17 | GND | Normal function. | D |
18, 19, 20 | OUT2 | If OUT2 is commanded to be pulled high, short is detected and outputs are Hi-Z. | B |
24 | nSLEEP | Both "S" & "P" variants: Device will be in SLEEP state and outputs are Hi-Z. | B |
VDD | |||
25 | IPROPI | IPROPI feedback is lost. ITRIP regulation, if enabled, is also lost. | B |
26 | nFAULT | False fault signalling possible. Device will continue to operate as commanded. | B |
27 | SDO | SPI communication is lost. | B |
28 | SDI | SPI communication is lost. | B |
Pin | Description of Potential Failure Effect(s) | Failure Effect Class | |
---|---|---|---|
No. | Name | ||
1 | SCLK | SPI communication is lost. | B |
2 | nSCS | SPI communication is lost. | B |
3 | PH/IN2 | Normal function as register bit is used for direction control. | D |
4 | EN/IN1 | Load will be in re-circulation (braking). No risk of spin direction reversal. | B |
5 | DRVOFF | Pin based shutoff is triggered and outputs are Hi-Z. | B |
6, 7, 8, 21, 22, 23 | VM | Device is powered off with driver Hi-Z. | B |
9, 10, 11 | OUT1 | Load drive capability is lost. | B |
12, 13, 14, 15, 16, 17 | GND | Device is powered off with driver Hi-Z. | B |
18, 19, 20 | OUT2 | Load drive capability is lost. | B |
24 | nSLEEP | Both "S" & "P" variants: Device will be in SLEEP state and outputs are Hi-Z. | B |
VDD | |||
25 | IPROPI | IPROPI feedback is lost. Load will be forced to recirculate if ITRIP regulation is enabled. | B |
26 | nFAULT | False fault signaling possible. Device will continue to operate as commanded. | B |
27 | SDO | SPI communication is lost. | B |
28 | SDI | SPI communication is lost. | B |
Short between pins | Description of Potential Failure Effect(s) | Failure Effect Class | |
---|---|---|---|
SCLK | SDI | SPI communication is lost. | B |
nSCS | SCLK | SPI communication is lost. | B |
PH/IN2 | nSCS | Normal function as register bit is used for direction control. | D |
EN/IN1 | PH/IN2 | External PWM control is lost. Internal ITRIP regulation is OK. No risk of spin direction reversal. | D |
DRVOFF | EN/IN1 | Outputs are either Hi-Z or load is in re-circulation state. | B |
VM | DRVOFF | Outputs are Hi-Z. | B |
OUT1 | VM | If OUT1 is commanded to be pulled low, short is detected and outputs are Hi-Z | B |
GND | OUT1 | If OUT1 is commanded to be pulled high, short is detected and outputs are Hi-Z. | B |
OUT2 | GND | If OUT2 is commanded to be pulled high, short is detected and outputs are Hi-Z. | B |
VM | OUT2 | If OUT2 is commanded to be pulled low, short is detected and outputs are Hi-Z. | B |
nSLEEP | VM | "S" variant: SLEEP functionality is lost | B |
VDD | "P" variant: Device damage possible. Device behavior can not be guaranteed. | A | |
IPROPI | nSLEEP | "S" variant: IPROPI feedback is inaccurate. ITRIP regulation levels, if enabled, will be lower. | B |
VDD | "P" variant: IPROPI feedback is inaccurate. Outputs are Hi-Z if ITRIP regulation is enabled. | ||
nFAULT | IPROPI | False fault signaling possible. IPROPI feedback is inaccurate. ITRIP regulation levels, if enabled, will be lower. | B |
SDO | nFAULT | False fault signaling possible. SPI communication will be affected during fault assertion. | B |
SDI | SDO | SPI communication is lost. | B |
Pin | Description of Potential Failure Effect(s) | Failure Effect Class | |
---|---|---|---|
No. | Name | ||
1 | SCLK | Device damage possible. | A |
2 | nSCS | Device damage possible. | A |
3 | PH/IN2 | Device damage possible. | A |
4 | EN/IN1 | Device damage possible. | A |
5 | DRVOFF | Outputs are Hi-Z. | B |
6, 7, 8, 21, 22, 23 | VM | Normal function. | D |
9, 10, 11 | OUT1 | If OUT1 is commanded to be pulled low, short is detected and outputs are Hi-Z. | B |
12, 13, 14, 15, 16, 17 | GND | Device is powered off with driver Hi-Z. | B |
18, 19, 20 | OUT2 | If OUT2 is commanded to be pulled low, short is detected and outputs are Hi-Z. | B |
24 | nSLEEP | "S" variant: SLEEP functionality is lost. | B |
VDD | "P" variant: Device damage possible. | A | |
25 | IPROPI | Device damage possible. | A |
26 | nFAULT | Device damage possible. | A |
27 | SDO | Device damage possible. | A |
28 | SDI | Device damage possible. | A |